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(54) Title; A METHOD AND A DEVICE FOR MOBILE TELEPHONE SUPERVISION 

(57) Abstract 

The invention relates to a method and to 
an arrangement for identifying an unauthorised 
user (A2) of a mobile telephone (M) that includes 
a terminal identity (m) and a chosen security 
code (PIN1). When the authorised owner (A I) 
has placed his/her authorised SIM -card (SIM I) 
in the mobile telephone (M) and has entered a 
security code (PIN1) into the mobile telephone 
(M), the mobile telephone ties a SIM-identity 
(si) of the SIM-card (SIM1) to the terminal 
identity (m). If the authorised user (Al) loses 
his/her mobile telephone (M), the subscription is 
blocked. An unauthorised user (A2) purchases 
a subscription and is issued with a second SIM- 
card (SIM2), which he/she places in the mobile 
telephone (M). When the unauthorised user (A2) 
enters a security code (PIN2*) that does not match 
the chosen security code (PINl), the mobile 
telephone (M) compares the SIM-identity (s2) of 
the second SIM-card (SIM2) with the terminal 
identity (m). Since these identities (s2, m) do 
not match one another, the mobile telephone (M) 
automatically sends the identities (s2, m) to a 
service node (F), which confirms receipt of the 
identities by sending a response signal (RES) 
to the mobile telephone (M). The service node 
(F) is able to obtain personal user information 
(A2-info) from the database (D2) of the operator 
(P2) relating to the unauthorised user (A2) of the 
mobile telephone (M), via the SIM-identity (s2). 
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A METHOD AND A DEVICE FOR MOBILE TELEPHONE SUPERVISION 



FIELD OF INVENTION 

The present invention relates to a method and to an 
arrangement for identifying a user of a mobile communications 
unit . 



FIELD OF INVENTION 

10 

It is known to issue with each mobile communications unit a 
user card that has a unique user identity and that must be 
used with the mobile communications unit in order for the 
unit to be functional. The user card is tied to a subscriber 
15 to a specific operator. 

Each mobile communications unit, which may be a mobile 
telephone or a cordless telephone for instance, has a 
terminal identity. This terminal identity may be the 

20 manufacture number or serial number of the unit, referred to 
in the European mobile telephone system, the GSM system, as 
the IMEI identity (International Mobile Equipment Identity) . 
The IMEI identity is stored in a circuit in the mobile 
communications unit and cannot readily be accessed. The 

25 aforesaid user identity belonging to a specific user card is 
referred to in the GSM system as the IMSI identity 
(International Mobile Subscription Identity) 



30 



In the GSM system, the user card is referred to as the SIM- 
card and the IMSI identity may also be referred to as the 
SIM- identity . 
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When the owner of a mobile communications unit wishes to tie 
a mobile communications unit to a subscription, he or she 
applies to an operator for the purchase of a SIM-card. This 
card entitles the user to an operator subscription service 
via which the mobile communications unit is able to utilize 
those networks that belong to the operator. 

in his/her application, the owner states the terminal 
identity of his/her mobile communications unit together with 
personal information, such as name, address, telephone 
number, personal identification number, this information 
being stored by the operator in a database or some like 
device. The operator may also store in the same location 
information relating to those services that the new owner may 
use. Services such as call billing are performed on the user 
card, for instance. 

The operator assigns a unique user identity to the SIM-card, 
so-called SIM-identity, which relates to the owner 
information stored in the database. The user identity may 
also include a unique identification code that identifies the 
operator which administers the subscription to which the SIM- 
card is tied. 

Swedish Patent No. 9203351-3 teaches a mobile communications 
unit that can distinguish its own user card from other user 
cards . 

If a mobile communications unit belonging to an authorised 
user is stolen by an unauthorised user, the authorised owner 
will report the theft to the operator that administers the 
subscription utilized by the stolen mobile communications 
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unit. The operator is then able to block the user card in the 

stolen unit, wherewith the unit can no longer be used 
together with the blocked user card. 

5 The unauthorised user is able to replace the existing user 
card in the unit with another user card that is allocated a 
user identity and therewith obtain access to the stolen 
mobile communications unit. The unauthorised user is then 
able to set up a call connection via the stolen mobile 
10 communications unit on the subscription belonging to the new 
user card. 

It is known to prevent the use of a stolen mobile 
communications unit by an unauthorised user by blocking the 
15 stolen unit upon request from the owner, so as to render the 
unit unusable. In this case, the mobile communications unit 
is equipped with an authent icator that can be used by the 
operator to block the unit and therewith prevent its further 
use . 

20 

Another method of preventing an unauthorised user from using 
a stolen mobile communications unit is to require a special 
code to be keyed-in when one user card is replaced with a new 
user card, in order for the new user card to function 
25 together with the mobile communications unit. The mobile 
communications unit is otherwise unusable. 

It is thus possible to prevent an unauthorised user from 
using a mobile telephone, although the unauthorised user will 
30 remain anonymous. It is not therefore possible to insure a 
mobile communications unit at present, because of the large 
number of mobile communication units that are stolen. Insured 
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mobile communications units would result in large claims on 
respect ive insurance companies . 

Patent Specification WO 95/26115 describes a mobile telephone 
that can be used when the IMSI identity of a SIM-card 
inserted into a mobile telephone coincides with the identity 
pre-stored in the mobile telephone. The mobile telephone 
compares the two identities and blocks further use of the 
mobile telephone when these identities do not coincide. 

Thus, an operator is able to ensure that the mobile telephone 
can only be used with a SIM-card that belongs to the 
operator, this SIM-identity coinciding with the identity pre- 
stored in the mobile telephone. The mobile telephone will be 
blocked against further use when a user replaces the SIM-card 
with an unauthorised SIM-card. 

U.S. Patent Specification 4,843,385 teaches a radio that can 
be blocked by keying a security identity into the radio. The 
radio is disabled in its blocked state, and therefore cannot 
be used. In order to unblock the radio, it is necessary to 
enter the correct identity. Otherwise, the radio 
automatically sends a message to the operator that has the 
identity of the radio, indicating that the wrong identity has 
been keyed- in, wherewith appropriate measures can be taken. 

DISCLOSURE OF THE INVENTION 



The present invention is concerned with the problem of 
ascertaining whether or not the user of a user card is 
authorised to use the card in a given telecommunications 
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unit. This check shall be carried out without the user of the 

mobile communications unit being aware of the check. 

Another problem with which the invention is concerned is one 
of enabling an unauthorised user of a mobile communications 
unit to be identified without forewarning the unauthorised 
user . 

Accordingly, the object of the present invention is to 
ascertain whether or not a user of a mobile communications 
unit is authorised to use his/her user card in the unit, and 
to establish the identify of an unauthorised user of a mobile 
communications unit. This shall take place without either the 
user or the unauthorised user of the mobile communications 
unit being aware of these procedures. 

To this end, it is proposed in accordance with the present 
invention that when inserting a user card into a mobile 
communications unit, the unit will automatically request the 
insertion of a security code. The user then enters a code 
into his/her mobile communications unit. If the security code 
entered is erroneous and the terminal identity and the user 
identity do not coincide with one another, the mobile 
communications unit automatically sends its own terminal 
identity and the user identity of the inserted user card to a 
service node. 

The service node may be an insurance company with which the 
mobile communications unit is insured, or it may be the 
operator responsible for the subscription to which the user 
card is tied. The information associated with the user 
identity obtained from the mobile communications unit may 
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then be used in the service node to take appropriate action, 

such as tracing an unauthorised user, for instance. 

More specifically, the problem is solved by virtue of the 
authorised owner of the mobile communications unit 
stipulating the identity of the user card with which the 
mobile communications unit shall function, by entering a 
security code chosen by the authorised owner into said unit 
when the user card is placed therein. This automatically ties 
the user identity of the user card with the terminal identity 
such as to establish a specific relationship therebetween. 

The mobile communications unit will ask for the security code 
automatically each time a user card is placed in the unit. If 
the security code entered in response to this request is not 
correct, or if the code is not entered into the unit, the 
unit will compare the user identity belonging to the inserted 
user ' card with the terminal identity. If these identities 
fail to show the aforesaid specific mutual relationship, the 
mobile communications unit stores the user identity and 
automatically sends both identities to the service node. The 
mobile communications unit then repeats this transmission of 
the stored user identity and the terminal identity without 
the user of the mobile communications unit being aware of 
this procedure, until the mobile communications unit receives 
a response signal from the service node. The service node 
confirms receipt of the user identity and the terminal 
identity transmitted by the mobile communications unit, by 
sending a response signal to the communications unit. 
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The mobile communications unit ceases to send stored user 
identity and terminal identity upon receipt of the response 
signal and erases the stored user identity. 

The service node is then able to obtain information tied to 
the user identity, by contacting the operator of the 
subscription utilized by the user card in the mobile 
communications unit, and therewith identify the user of the 
user card inserted in said unit. 



One advantage afforded by the present invention is that a 
stolen unit can be traced to the unauthorised user without 
the unauthorised user being aware of what is happening and 
without the unit being blocked. It is the mobile 
15 communications unit that sends the user identity and the 
terminal identity automatically to the service node. 

Because the mobile communications unit repeatedly sends the 
stored user identity and the terminal identity when a 

20 mismatch is found until a response signal is obtained, 
without the user of the unit being aware of what is 
happening, information relating to the user identity and the 
terminal identity stored in said unit will eventually be 
received in the service node even should the user be located 

25 temporarily in a radio- shielded place. 

Another advantage is that the mobile communications unit is 
now insurable, because it can be traced to an unauthorised 
user. The present invention can also be used by the service 
30 node to check whether everything is in order, by contacting 
the authorised owner of the unit to ascertain whether or not 
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a mistake has been made, for instance in the case of 
confusion between user cards. 

Another advantage afforded by the invention is that the 
mobile communications unit can be marketed by the operator as 
being secure against theft, since unauthorised users that are 
aware of the modus operandi of the inventive electronics are 
not interested in possessing such a mobile communications 
unit . 

The invention will now be described in more detail with 
reference to preferred exemplifying embodiments thereof and 
also with reference to the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure la is a schematic illustration of an inventive 
communications network. 

Figure lb is a graphic illustration of a database storage 
field for storing data in accordance with the invention. 

Figure 2 is a block schematic of a mobile telephone and a 
service node according to the invention. 

Figure 3 is a flowchart that illustrates the inventive 
method. 

Figure 4 is a signalling diagram that illustrates signalling 
between the mobile telephone and the service node in 
accordance with the invention. 



10 
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DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 

Figure la illustrates the construction of a communications 
network that includes one or more radio communications 
networks, such as, Inter alia, a first radio communications 
network RN11, a second radio communications network RN12, and 
a third radio communications network RN13, and also a public 
switched telephone network, PSTN . Each radio communications 
network RN11, RN12, RN13 includes one or more base stations 
connected to a mobile services switching centre (MSC) which 
forms an interface against the public switched telephone 
network, PSTN, to which operators Pi and P2 and a service 
node F are also connected. 



15 Several mobile telephone users are located in the radio 
communications network RN11, among them an authorised user 
Al, also called an owner, and a base station BS1 connected to 
the switching centre MSC . The owner Al owns a mobile 
telephone M (Figure 2) which is provided with an inaccessibly 

20 stored terminal identity, a so-called mobile identity m which 
has been registered by the owner Al at the service node F. 
The mobile identity m identifies the mobile telephone M and 
may be the serial number of the telephone for instance. The 
service node F may be an insurance company used by one of the 

25 operators PI, P2 . 

Several mobile telephone users are present in the radio 
communications network RN12, among them an unauthorised user 
A2, and a base station BS2 that is connected to the mobile 
30 services switching centre MSC . 
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Figure la shows the mobile telephone M and its mobile 
identity m in two different positions, i.e. a position PosA 
of the owner Al and a position PosB of the unauthorised user 
A2 . 

Two operators PI and P2 are connected to the mobile services 
switching centre MSG, and supply subscriptions for utilizing 
the radio communications networks RN11, RN12, RN13 . The 
operator PI stores information relating to its subscriber 
users in a database Dl , and the operator P2 stores 
information relating to its user subscribers in a database 
D2, as described in more detail hereinafter. 

The databases Dl, D2 include storage fields 10 in which 
information relating to respective users Al , A2 of each user 
card, the SIM-cards SIMl, SIM2, SIM3 as described above is 
stored. When purchasing a SIM-cards SIMl, SIM2, SIM3 from the 
operator PI or from the operator P2, the SIM-card SIMl, SIM2, 
SIM3 is given an associated SIM-identity si, s2, s3 , which is 
tied to corresponding information relating to the user Al, A2 
of each SIM-card SIMl, SIM2, SIM3 . 

An identification code Pl-id, P2-id included in the SIM- 
identity si, s2, s3 identifies the operator Pi, P2 with which 
the SIM-identity si, s2, s3 is registered. 

Figure lb illustrates the possible construction of a storage 
field 10 in the databases Dl, D2 . The storage field 10 
includes five storage units 1, 2, 3, 4 and 5 in which data 
can be stored. The names of respective users Al, A2 are 
stored in the first storage unit 1, the telephone number of 
respective users Al , A2 is stored in the second storage unit 
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2, the address of respective users Al, A2 is stored in the 
third storage unit 3, the personal identity number of 
respective users Al , A2 is stored in the fourth storage unit 
4, and the aforementioned SIM-identity si, s2, s3 tied to 
respective user information Al, A2 is stored in the fifth 
storage unit 5. The storage field 10 may include more than 
the aforesaid five storage units l, 2, 3, 4, 5 when wishing 
to store more user information. When a particular piece of 
user information need not be stored in the storage field 10, 
a corresponding storage unit may be excluded. The order in 
which user information is stored in the storage units 1, 2, 

3, 4, 5 may be different to that described, the illustrated 
construction of the storage field 10 being given merely by 
way of example . 

Figure 2 is a block schematic illustrating a mobile telephone 
M, a first SIM-card SIM1 and the af oredescribed service node 
F. The mobile telephone M includes, among other things, an 
interlinking unit 301, a card space u, a read-in unit 303, a 
first comparitor unit 305, a receiver 306, a transmitter 307, 
a keypad 309, a display 310, an enquiry unit 313, a second 
comparitor unit 315, a memory unit 317, and a control unit 
319, these components being those illustrated in the Figure. 
The receiver 306 and the transmitter 307 are connected to an 
antenna 311. The units are interconnected by a databus 312. 

The first SIM-card SIM1 includes, among other things, a 
processor 331, which is the component shown in the Figure. 
The SIM-identity SI, also shown in the Figure, allocated to 
the first SIM-card SIM1 is stored in the processor 331. 
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The service node F includes, among other things, a receiver 
321, a transmitter 322, a localising unit 323. a computer 
unit D P , a control means 329 and a registering unit 330. The 
receiver 321 and the transmitter 322 are connected to an 
antenna 327. The units are interlinked by a databus 328. 

The memory unit 317 of the mobile telephone M is used to 
inaccessibly store the aforesaid mobile identity m and a 
chosen security code PIN1 . This code is used by the owner Al 
when he/she removes and replaces his/her first SIM-card SIM1 
from and into the mobile telephone M respectively. The memory 
unit 317 is also used to temporarily store the SIM-identity 
82, for instance. When the first SIM-card SIM1 is placed in 
the intended card space u in the mobile telephone M, the read 
unit 303 reads and registers the SIM-identity si belonging to 
the first SIM-card SIM1 . 

The enquiry unit 313 is used to ask the owner to enter 
his/her security code PIN1 in response to a request displayed 
on the display 310. The owner Al enters a security code PIN1< 
on the keypad 3 09 . 

The first comparitor unit 305 is used to compare the entered 
security code PIN1' with the chosen, stored security code 
PIN1 . 

The interlinking unit 301 ties together and establishes a 
relationship between the mobile identity m and the SIM- 
identity si stored in the memory unit 317, as before 
described. 
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The second comparitor unit 315 in the mobile telephone M 
compares the registered SIM-identity si with the mobile 
identity m to ascertain whether or not the relationship 
established in the interlinking unit 301 has been fulfilled. 

The units u, 301, 303, 305, 306, 307, 309, 313, 315, 317, 319 
in the mobile telephone M are connected to the databus 312, 
through which the units communicate with one another. The 
control unit 319 in the mobile telephone M controls the 
various units u, 301, 303, 305, 306, 307, 309, 313, 315, 317 
through the medium of the databus 312 and causes said units 
to perform desired operations in accordance with the method. 

The localising unit 323 in the service mode F includes, among 
15 other things, an identifying unit 325 which identifies the 
operator P2 associated with a SIM-identity s2 received in the 
service node F, and the identifying unit 325 identifies the 
user A2 of the mobile telephone M. The component 325 is shown 
in the Figure . 



10 



20 



25 



30 



The computer unit D F in the service node F functions to 
register incoming messages, such as the SIM-identity s2 and 
the mobile identity m, these messages being shown on the 
screen D s of the computer D F . 

The registration unit 330 is used to store the aforesaid 
mobile identity m and its corresponding owner Al . 

The control means 329 in the service node F controls the 
various units 321, 322, 323, D p , 325, 330 via the databus 
328, said units 321, 322, 323, D F , 325, 330 being connected 
to the databus 328. 
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An exemplifying embodiment will now be described with 
reference to Figures la and 2, wherein the owner Al wishes to 
identify an unauthorised user A2 of a mobile telephone M that 
has been lost or stolen. 

When using the mobile telephone M for the first time, the 
user Al chooses a security code PINl and enters the code in . 
the mobile telephone M. The mobile telephone M registers the 
chosen security PINl and the code is stored inaccessibly in 
the mobile telephone M. 

The owner Al later wishes to subscribe to operator PI and 
therefore applies for a first SIM-card SIM1 that entitles 
him/her to the subscription services offered by the operator 
PI. The application includes the mobile identity m and 
personal information Al-info, such as the name, telephone 
number, address, personal identification number of the owner 
Al . The operator PI stores the owner information Al-info in 
the storage field 10 in the database Dl in accordance with 
the above, and relates this information to the SIM-identity 
si. The first SIM-card SIM1 is allocated the aforesaid SIM- 
identity si and the first SIM-card SIM1 is then delivered to 
the owner Al . The SIM-identity si includes the identification 
code PI -id of the operator PI. 

The owner Al can then place the first SIM-card SIM1 in the 
card space u in the mobile telephone M. The mobile telephone 
M senses that the first SIM-card SIM1 is in position in the 
card space u, wherewith the mobile telephone M reads- in the 
SIM-identity si of the first SIM-card SIM1. The mobile 
telephone M will then ask the owner to enter the security 
code PINl , for instance in response to a request shown on the 
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display 310. The owner Al enters into the mobile telephone M 
a security code that he has himself chosen. 

The mobile telephone M reads-in the entered security code 
PINl' and compares this code with the chosen, stored security 
code PINl . When these codes are in agreement, the mobile 
telephone M ties the SIM-identity si with the mobile identity 
m and registers the relationship that prevails between the 
SIM-identity si and the mobile identity m. The way in which 
this is carried out will be described below with reference to 
Figure 2 . 



The owner Al is now able to use the mobile telephone M and 
establish communication on the subscription tied to the 
15 operator PI . 



It is now assumed that an unauthorised user A2 takes the 
mobile telephone M into his possession. The owner Al informs 
the operator PI that the mobile telephone M is missing. The 
20 operator PI will then block the SIM-identity si of the first 
SIM-card SIM1 in the mobile telephone M, therewith making it 
impossible for the user A2 to use the mobile telephone M with 
the first SIM-card SIM1 . 



25 The unauthorised user A2 is assumed to wish to subscribe to 
the operator P2 and applies for a second SIM-card SIM2 with 
the operator P2 , therewith entitling user A2 to the services 
afforded by the operator P2 . In the same way as that 
described above, the user A2 submits an application which 

30 contains mobile identity m and personal information A2-info. 

The operator P2 stores the A2-info relating to the user A2 in 
the database D2 and relates this information to the SIM- 
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identity s2 . The SIM- identity s2 is tied to the second SIM- 
card SIM2 and the second SIM-card SIM2 is then delivered to 
the user A2 . The SIM- identity s2 includes the operator 
identification code P2-id. 

The user A2 then places the second SIM-card SIM2 in the card 
space u of the mobile telephone M, wherewith the mobile 
telephone M senses that the second SIM-card SIM2 is in 
position in the card space u. The mobile telephone M reads-in 
the SIM-identity s2 of the second SIM-card SIM2 and then asks 
the owner to enter the aforesaid security code PIN1, via the 
display. The user A2 enters a code PIN2' in the mobile 
telephone M. 

The mobile telephone M reads the entered code PIN2' and 
compares this code with the chosen, stored security code 
PIN1. Since these codes do not agree, the mobile telephone M 
compares the SIM-identity S2 with the mobile identity M. This 
comparison shows that the aforesaid relationship between the 
SIM-identity s2 and the mobile identity m is invalid. The 
mobile telephone M then stores the SIM-identity s2 in a 
memory and automatically transmits the SIM-identity s2 and 
the mobile identity m. 

A so-called SMS-service (Short Message Service) in the GSM 
system is used in the transmission of the SIM-identity s2 and 
the mobile identity m on a stand-alone dedicated control 
channel (SDCCH) . The SIM-identity s2 and the mobile identity 
m are transmitted on the control channel SDCCH via the base 
station BS2 and the mobile services switching centre MSC to a 
computer D F included in the service node F. The SMS-service 
is used in the GSM system to send short text messages to and 
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from a mobile telephone, such text messages being allowed to 
include a maximum of 160 alphanumerical characters. 

* The mobile telephone M periodically repeats the dispatch of 
the stored SIM-identity s2 and the mobile identity m at 
regular time intervals, each time interval having a duration 
of T-seconds, until the mobile telephone M receives a 
response signal RES. The message is sent repeatedly from the 
mobile telephone M in order to ensure that the base station 
BS2 will ultimately receive the SIM-identity s2 and the 
mobile identity m, for instance in the event of the mobile 
telephone M being located temporarily in an area in which it 
is screened radio-wise from the base station BS2 . 

15 The computer D F in the service node F receives and registers 
the SIM-identity s2 and the mobile identity m sent by the 
mobile telephone M and presents the same on the screen D s of 
the computer D F . The computer D F then automatically sends to 
the mobile telephone M , via the switching centre MSC and the 
base station BS2, a response signal RES confirming the 
receipt and registration of the SIM-identity s2 and the 
mobile identity m. As in the af oredescribed case, the SMS- 
service is used to transmit the SIM-identity s2 and the 
mobile identity m on the control channel SDCCH. 



20 
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Receipt and registration of the SIM-identity s2 and the 
mobile identity m in the computer D F can also be confirmed by 
sending the response signal RES manually from the computer D F 
in the same way as that described above , 



30 



The mobile telephone M ceases periodic transmission of the 
SIM-identity s2 and the mobile identity m upon receipt of the 
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response signal RES, and then erases the SIM- identity s2 from 
its memory. 

When the service node F becomes aware of the SIM-identity s2 
and the mobile identity m received by the computer D F and 
presented on the screen D s , the service node F reads the 
operator identification code P2-id from the SIM-identity s2 
and therewith identifies the operator P2 with which the SIM- 
identity s2 is registered. The service node F then contacts 
the operator P2 and obtains from the operator database D2 
personal information concerning the user A2 , A2-info tied to 
the SIM-identity s2 . 

The service node F also contacts the owner Al tied to the 
registered mobile identity m and checks whether an error has 
occurred or if the owner Al has lost his mobile telephone M. 
Since it is assumed that the owner Al has lost his mobile 
telephone M in the illustrated case, the service node F uses 
the personal information A2-info obtained from the operator 
p2 to trace the user A2 of the mobile telephone M. 

A variant of the af oredescribed example will now be 
described . 

As with the previous example, it is assumed that the owner Al 
takes out a subscription with the operator PI and is issued 
with a first SIM- card SIM1 tied to the SIM-identity si, in 
which the operator identification code Pi -id is included. The 
owner Al places the first SIM-card SIMl in the mobile 
telephone M and enters the security code PIN1' in response to 
a request made by the mobile telephone M, in accordance with 
the aforegoing. The mobile telephone M ties the SIM-identity 
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sl with the mobile identity m and registers the relationship 
that prevails between the SIM- identity sl and the mobile 
identity m . 

The owner Al is now able to use his mobile telephone M and to 
establish communication on the subscription tied to the 
operator PI . 



It is now assumed that the owner- Al- -wishes- to take'-ouf a~ new- 
subscription with the operator P2 . The owner Al therefore 
applies for a third SIM-card SIM3 which will entitle him to 
use the new subscription with the operator P2 . The 
application includes the mobile identity m and personal 
information Al-info relating to the owner Al . The personal 
information Al-info is stored in the database D2 by the 
operator P2, in the same way as that described above, and the 
personal information Al-info is related to the SIM- identity 
s3. The third SIM-card SIM3 is allocated the SIM-identity s3 
and the third SIM-card SIM3 is then issued to the owner Al . 
The SIM-identity s3 includes the operator identification code 
P2-id. 



The owner Al places the third SIM-card SIM3 in the card space 
u of the mobile telephone M and enters the security code 
PIN1' in response to a request from the mobile telephone M. 
The mobile telephone M senses that the third SIM-card SIM3 is 
in place in the card space u and reads-in the SIM-identity s3 
of the SIM-card SIM3 and the entered security code PIN1 ' 

The mobile telephone M then compares the entered security 
code PIN1' with the aforesaid chosen security code PIN1 
stored in the telephone. The comparison finds that these 
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codes match one another and the mobile telephone M ties the 
SIM-identity s3 with the mobile identity m and registers the 
relationship prevailing between the SIM-identity s3 and the 
mobile identity m. 

The user Al is now able to use the mobile telephone M to 
establish communication with the subscription tied to the 
operator P2 . 

It is assumed in this example that the owner Al enters the 
wrong security code PIN4 in the mobile telephone M, after 
having placed the third SIM- card SIM3 in the card space u. 
The mobile telephone M will then read- in the erroneous 
security code PIN4 and compare it with the aforesaid security 
code PIN1 chosen by the owner Al . The comparison shows that 
these codes do not match and the mobile telephone M will 
continue by comparing the SIM-identity s3 allocated to the 
third SIM-card SIM3 with the mobile identity m. Because the 
SIM-identity s3 and27 the mobile identity m are not tied 
together by the mobile telephone M, the comparison will show 
that the aforesaid relationship between the SIM-identity si 
and the mobile identity m is invalid with respect to the SIM- 
identity s3 and the mobile identity m. The mobile telephone M 
then stores the SIM-identity s3 in its memory and 
automatically dispatches the SIM-identity s3 and the mobile 
identity m. 

The mobile telephone M uses the af oredescribed SMS-service to 
dispatch the SIM-identity s3 and the mobile identity m on the 
control channel SDCCH. The SIM-identity s3 and the mobile 
identity m are sent on the control channel SDCCH to the 



WO 97/43866 PCT/SE97/00702 

21 

computer D F in the service node F, via the base station BS1 
and the switching centre MSC. 

The mobile telephone M continues to transmit the stored SIM- 
5 identity s3 and the mobile identity m at regular intervals 
until it receives the response signal RES , as described 
above . 

The computer D F in the service node F receives and registers 
10 the SIM-identity s3 and the mobile identity m sent by the 
mobile telephone M, and presents the same on the computer 
screen D s . The computer D F then automatically sends a 
response signal RES to the mobile telephone M, via the 
switching centre MSC and the base station BS1, in 
15 acknowledgement of the receipt of said identities. As in the 
earlier case, the SMS-service is used to send the SIM- 
identity s3 and the mobile identity m on the control channel 
SDCCH . ' 

20 The mobile telephone M ceases to send the SIM-identity s3 and 
the mobile identity m upon receipt of the response signal RES 
and then erases the stored SIM-identity s3 from its memory. 

When the service node F notices on the computer screen D s 
25 that the computer has received the SIM-identity s3 and the 
mobile identity m, the service node F runs a check on the 
owner Al of the registered mobile identity m. The service 
node F takes no further action when an error has occurred. 
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A further alternative to the af oredescribed example is one in 
which the owner Al applies for the first SIM-card SIM1 from 
the operator Pi with the intention of obtaining a 
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subscription, as described above. As in the previous case, 
the operator PI stores the personal information Al-info 
relating to the SIM-identity si in the database Dl and 
allocates the first SIM-card SIM1 the SIM-identity si in 
which the operator identification code PI -id is included. 

The owner Al places the first SIM-card SIM1 in the intended 
card space u and enters the security code PIN1' in response 
to a request from the mobile telephone M . The mobile 
telephone M senses that the first SIM-card SIM1 is in 
position in the card space u and reads-in the SIM-identity si 
of the first SIM-card SIM1 and the entered security code 
PIN1' . 

The mobile telephone M compares the entered security code 
PIN1' with the aforementioned chosen and stored security code 
PIN1 . The comparison shows that these codes are identical and 
the mobile telephone M then ties the SIM-identity si with the 
mobile identity m and registers the relationship that 
prevails between the SIM-identity si and the mobile identity 
m . 

The owner Al is now able to use the mobile telephone M for 
communication on the subscription tied to the operator PI. 

Assume that the owner Al removes the first SIM-card SIM1 and 
then places the first SIM-card SIM1 in the intended card 
space u in the mobile telephone M. The mobile telephone M 
then senses the presence of the first SIM-card SIM1 and 
reads-in the SIM-identity of the first SIM-card SIM1 and asks 
for the chosen, stored security code PIN1 to be entered. 
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Assume that the owner Al enters an erroneous security code 
PIN3. The mobile telephone M reads-in the entered security 
code PIN3 and compares this code with the chosen, stored 
security code PIN1 . This comparison shows that the entered 
security code PIN3 is erroneous. The mobile telephone M then 
makes a comparison between the SIM-identity si and the mobile 
identity m. This comparison shows that the aforesaid 
relationship between the SIM-identity si and the mobile 
identity m is valid and no further procedures are carried out 
in the mobile telephone M. 

The owner Al is therewith able to use the mobile telephone M 
and communicate on the subscription tied to the first SIM- 
card SIM1. 

The mobile telephone M will compare the SIM-identity si with 
the mobile identity m, even in the case when the owner <A1 
neglects to enter the security code PIN1 as requested by the 
mobile telephone in the previous examples. The comparison 
shows that the aforesaid relationship between SIM-identity si 
and the mobile identity m to be valid, wherewith no further 
procedures are carried out in the mobile telephone M. 

Figures 3a and 3b are flow charts which illustrate the 
inventive method as described in the previous examples. The 
mobile identity m and the security code PIN1 chosen by the 
telephone owner Al are stored in the mobile telephone M. The 
owner Al has registered the mobile identity m with the 
service node F, see above. 

The method is commenced with the owner Al placing the first 
SIM-card SIM1 in the card space u intended in the mobile 
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telephone M, step 101. The first SIM-card SIM1 entitles the 
user to subscription services provided by the operator PI, 
and the SIM-identity si allocated to the first SIM-card SIM1 
is tied to personal information Al-info related to the owner 
Al, this information being stored in the database Dl of the 
operator Pi as described above. The SlM-identity si includes 
the operator identification code Pi -id. 

The mobile telephone M senses the presence of the first SIM- 
card SIMi in the card space u and reads-in the SlM-identity 
si belonging to the first SIM-card SIMI in step 103, and asks 
for the security code PIN1 to be entered. 

The owner Al enters the security code PIN1' in step 105, and 
the mobile telephone M reads-in said code PIN1'. The mobile 
telephone M then compares the entered security code PIN1' 
with the chosen, stored security code PINl in step 107. The 
comparison shows that these codes are identical, in 
accordance with an alternative Y . In step 109, the mobile 
telephone M ties the read-in SIM-identity si to the mobile 
identity m and registers the relationship that prevails 
between the SIM-identity si and the mobile identity m. 

An unauthorised user A2 takes the mobile telephone M and 
replaces the first SIM-card SIMI with a second SIM-card SIM2 
that entitles the user to the subscription services provided 
by the operator P2. and the SIM-identity s2 allocated to this 
second SIM-card SIM2 is tied to personal information A2-info 
relating to the user A2 and this information is stored in the 
database D2 of the operator P2 . The SIM-identity s2 includes 
the operator identification code P2-id. 
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In step 101, the user A2 places the second SIM-card SIM2 in 

the intended card space u in the mobile telephone M. 

The mobile telephone M senses the presence of the second SIM- 
card SIM2 in the card space u and, in step 103, reads-in the 
SIM- identity s2 and requests the security code PIN1 chosen by 
the owner Al , in accordance with the above. 

In step 105, the user A2 enters the security code PIN2' and 
the mobile telephone M reads - in the entered security code 
PIN2'. The mobile telephone M then compares the entered 
security code PIN2' in step 107 with the chosen, stored 
security code PIN1, this comparison showing a mismatch in 
accordance with an alternative N . 

In step 111, the mobile telephone compares the read- in SIM- 
identity s2 with the mobile identity m, this comparison 
showing that these identities do not fulfil the above- 
mentioned tied relationship, in accordance with alternative 
N. In step 112, the mobile telephone M then stores the read- 
in SIM-identity s2 in the memory and transmits the read-in 
SIM- identity s2 and the mobile identity m in step 113. The 
mobile telephone M uses in this transmission the aforesaid 
SMS-service and transmits the SIM-identity s2 and the mobile 
identity m to the computer D F in the service node F on the 
control channel SDCCH, via the base station BS2 and the 
switching centre MSC. 

According to a method step 117 in Figure 3b, a check is run 
30 in the mobile telephone M to ascertain whether or not a 
response signal RES has been received from the service node 
F. This is referenced Cl in Figures 3a and 3b. If no such 
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response signal has been received, according to alternative 
N, the mobile telephone M continues in step 114 to repeatedly 
transmit the SIM- identity s2 and the mobile identity m stored 
in step 113 at regular time intervals, where each time 
interval has a duration of T-seconds. This is referenced C2 
in Figures 3a and 3b. 

In step 115 , the computer Dp in the service node F receives 
and registers the SIM- identity s2 and the mobile identity m 
sent by the mobile telephone M and presents these identities 
on the computer screen D s . The computer D F confirms receipt 
and registration of the SIM- identity s2 and the mobile 
identity m by sending a response signal RES to the mobile 
telephone M via the switching centre MSC and the base station 
352 , in step 116. As in the previous case, the SMS-service is 
used to dispatch the SIM- identity s2 and the mobile identity 
m on the control channel SDCCH. 

The mobile telephone M receives the response signal RES in 
accordance with an alternative Y in step 117 and therewith 
ceases its periodic transmission of the SIM-identity s2 and 
the mobile identity m, wherewith the mobile telephone M 
erases the stored SIM-identity s2 from its memory in step 
119 . 

The service node F then contacts the operator P2 identified 
by the identification code P2-id in step 121, in accordance 
with the aforegoing. The service node F is supplied with user 
personal information A2-info from the operator database D2 by 
the operator P2, this information A2-info being tied to the 
SIM-identity s2 received in the service node F. This personal 
information A2-info can be used by the service node F to 
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identify the user A2 of the mobile telephone M having the 
mobile identity m, in step 121. 

In step 123, the service node F contacts the owner Al tied to 
5 the registered mobile identity m and checks whether a mistake 
has occurred or whether the owner Al has had his mobile 
telephone M stolen, for instance. 

Since the owner Al in this example has had his mobile 
10 telephone M stolen, it is necessary for the service node to 
take the steps required in accordance with alternative Y in 
step 125. These measures are carried out in step 127 and may 
involve the service node F using the personal information A2- 
info received from the operator P2 to trace the user A2 of 
15 the mobile telephone M. 

In the case when the owner A2 of the mobile telephone M in 
the previous example is assumed to place in the mobile 
telephone M a third SIM-card SIM3 that is not tied to the 

20 mobile identity m in step 101, and the owner Al enters a 
wrong security code PIN3 in the mobile telephone M at the 
same time in step 107, or refrains from entering the security 
code PINl', the check carried out by the service node F with 
respect to the owner Al in step 123 may result in the service 

25 node F refraining from further action in accordance with an 
alternative N in step 125 . 
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An alternative embodiment of the invention will now be 
described with reference to Figures 3a and 3b and to the 
previous example . 
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As described above, the owner Al applies for a subscription 
with operator PI and therewith receives the first SIM-card 
SIM1 having the allocated SIM- identity si that includes the 
identification code PI- id. In step 101, the owner Al places 
the SIM-card SIM1 in the intended card space u in the mobile 
telephone M. According to the af oredescribed method, this 
results in the mobile telephone M tying the SIM-identity si 
with the mobile identity m in step 109 and registering the 
relationship that prevails between the SIM-identity si and 
the mobile identity m. 

It is assumed that the owner Al removes the first SIM-card 
SIM1 from the mobile telephone M and then places the first 
SIM-card SIM1 back into the card space u in the mobile 
telephone M , in accordance with step 101. The mobile 
telephone M will therewith sense the presence of the first 
SIM-card SIMl in the card space u and, in step 103, read-in 
the SIM-identity si of the SIM-card SIMl and present on the 
display a request for the owner Al to enter the aforesaid 
chosen, stored security code PIN1 . 

In step 105, the owner Al is assumed to enter the wrong 
security code PIN3 . The mobile telephone M reads-in the 
entered security code PIN3 and compares this code with the 
chosen, stored security code PIN1 . This comparison shows that 
the security code PIN3 does not agree with the security code 
PIN1, step 107. The mobile telephone M continues to compare 
the read- in SIM-identity si with the mobile identity m, step 
111, wherein this comparison shows that the SIM-identity si 
and the mobile identity m fulfil the relationship in the 
previous example, wherewith alternative Y is applied and no 
further measures are carried out in the mobile telephone M . 
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The aforementioned signalling on control channel SDCCH will 
now be described with reference to a signalling schema given 
in Figure 4. The vertical lines indicate events occurring in 
the mobile telephone M, the base station BS2, the mobile 
services switching centre MSG and the service node F in a 
time sequence, wherein the time is referenced t in the 
Figure . 



As described in the aforegoing, the owner Al has in his 
possession the mobile telephone M having the mobile identity 
m, which is registered in the service node F. The owner Al 
applies for the use of a subscription offered by the operator 
Pi, wherewith the owner Al receives from the operator PI the 
15 first SIM-card SIM1 having the allotted SIM-identity si, as 
described fully in the aforegoing. The SIM-identity si 
includes the operator identification code Pl-id. 

The owner Al then places the first SIM-card SIM1 in the card 
20 space u in the mobile telephone M and then enters the 
security code PIN1 in response to a request made by the 
mobile telephone M, wherewith the mobile telephone M ties the 
SIM-identity si of the first SIM-card SIM1 to the mobile 
identity m. 



The owner Al is now able to use the mobile telephone M for 
communication on the subscription tied to the operator PI. 

It is now assumed that the unauthorised user A2 takes 
possession of the mobile telephone M and that the owner Al 
reports the loss to the operator PI and that the operator 
duly blocks the SIM-identity si of the first SIM-card SIM1 in 
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the mobile telephone M. The unauthorised user A2 is now 
unable to use the mobile telephone M with the first SIM-card 
SIM1 . 

It is also assumed that the user A2 wishes to subscribe to 
the services offered by the operator P2 and submits to the 
operator P2 an application for a second SIM-card SIM2 that 
will entitle the user to use the services afforded by 
operator P2 . In the same way as that described above, the 
user A2 includes in his application the mobile identity m 
together with user personal information A2-info. The operator 
P2 stores the user personal information A2-info in the 
database D2 and relates this information to the SIM-identity 
s2 . The SIM-identity s2 is tied to the second SIM-card SIM2 
and the second SIM-card SIM2 is then delivered to the user 
A2 . The SIM-identity s2 includes the operator identification 
code P2-id. 

It is assumed that the user A2 moves to a place in which he 
is shielded radio-wise from the base station BS2 , and that 
the user A2 places the second SIM-card SIM2 in the telephone 
card space u. The mobile telephone M senses the presence of 
the second SIM-card SIM2 in the card space u and reads-in the 
SIM-identity s2 of the second SIM-card SIM2 • The mobile 
telephone M then displays a message requesting the aforesaid 
security code PIN1 to be entered. The user A2 then enters the 
code PIN2' in the mobile telephone M. 

The mobile telephone M reads-in the entered code PIN2' and 
compares this code with the chosen, stored security code 
PIN1, as in the af oredescribed cases. Since these codes do 
not match, the mobile telephone M compares the SIM-identity 
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s2 with the mobile identity m. This comparison shows that the 
aforesaid relationship between the SIM- identity s2 and the 
mobile identity m is not fulfilled. The mobile telephone M 
therewith stores the SIM-identity s2 in its memory and 
automatically sends the SIM-identity s2 and the mobile 
identity m on the control channel SDCCH, as illustrated at 
point 401 in Figure 4. 

The mobile telephone M continues to send the aforesaid 
identities s2 and m at regular time intervals of T-seconds 
duration, as shown in the Figure, and awaits a response 
signal RES from the computer D F in the service node F. 

The user A2 is assumed to move from the radio-wise screened 
15 place, wherewith the SIM- identity s2 and the mobile identity 
m that have been repeatedly transmitted by the mobile 
telephone M will finally reach the base station BS2 at point 
403. The mobile telephone M utilizes the af oredescribed SMS- 
service to transmit the SIM-identity s2 and the mobile 
20 identity m on the control channel SDCCH to a point 405 in the 
Figure, via the base station BS2 and the switching centre 
MSC, where the computer D F in the service node F receives and 
registers the SIM-identity s2 and the mobile identity m. 

25 The SIM-identity s2 and the mobile identity m received and 
registered by the computer D F are shown on the screen D s . The 
computer D p then sends the response signal RES to the mobile 
telephone M on the control channel SDCCH at point 4 07 in the 
Figure, via the switching centre MSC and the base station BS2 

30 in the af oredescribed manner. 
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The mobile telephone M receives the response signal RES at 
point 40 9, wherewith the mobile telephone ceases to transmit 
the SIM- identity s2 and the mobile identity m and erases the 
stored SIM-identity s2 from its memory. 

The service node F notices that the computer D F has received 
the SIM- identity s2 and the mobile identity m and therewith 
rea( j[ s from the operator identification code P2-id included in 
the SIM-identity s2 the identity of the operator P2 with 
which the SIM-identity s2 is registered. The service node F 
then contacts the operator P2 and receives from the operator 
P2 personal information A2-info taken from the database D2 
tied to the SIM-identity s2 and to the user A2 . 

The service node F checks with the owner Al tied to the 
registered mobile identity m. Since the owner Al has lost 
possession of his mobile telephone M , the service node F uses 
the personal information A2-info received from the operator 
P2 to trace the user A2 of the mobile telephone M. 

As an alternative to the mobile telephone M transmitting the 
SIM-identity s2 and the mobile identity m at regular time 
intervals until the response signal RES is received, the 
mobile telephone M may be constructed to transmit the SIM- 
identity s2 and the mobile identity m on the control channel 
SDCCH each time the user A2 sets up a call connection on the 
second SIM-card SIM2 via the mobile telephone M, without the 
user A2 being aware of this transmission. This procedure is 
continued until the mobile telephone M receives the response 
signal RES, at point 409 in accordance with the aforegoing. 
Other possibilities are also feasible. 
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In a mobile telephone system other than the GSM system, 
services similar to the SMS-service. may be used and channels 
other than the SDCCH channel may be used to transmit said 
messages and signals between the mobile telephone M and the 
service node F. Similarly, channels other than the SDCCH 
channel of the GSM system may be used. 

The aforesaid SIM- identities si, s2 and s3 are corresponded 
by the IMSI identity (International Mobile Subscription 
Identity) in the GSM system, and the mobile identity m is 
corresponded by the IMEI identity (International Mobile 
Equipment Identity) (c inv v -the GSM system. Mobile telephone 
systems other than the GSM system use user cards with 
associated user identities similar to the SIM-card. 

It will be understood that the invention cannot be applied 
when the user Al does not choose a security code PIN1 in the 
af oredescribed examples when using the mobile telephone M for 
the first time . 



